Would encryption work in your case? Each individual mac get's its backups encrypted.

@JaredBusch Yes they are static assign /29 IP's from the ISP.
In the draytek you specify the IP's you have and then use the NAT screen to open ports on each IP to a local IP on the network.

Just wanted to check a similar thing can be done with the EdgeRouter.

And yes I know the EdgeRouter has no modem, just want to check if Bridge mode would work or would I need to assign the Modem an IP and the others to the EdgeRouter.

@scottalanmiller said in OwnCloud and LibreOffice Online:

That's how my wife describes me.

lol

Missing my wife right now, how she would describe me made most people blush.

Long ago I had an article on this on my own blog but that is no longer up, so I am copying it here...

https://web.archive.org/web/20150221062029/http://www.scottalanmiller.com/linux/2012/09/02/improving-elastix-memory-usage/

The default installation of Elastix has more services running than are typically needed or desired on a PBX. These services eat far more memory that is necessary and can very easily be cleaned up to improve memory utilization.

First we will stop a series of unnecessary services from starting at boot time (this will disable shared storage, local email handling, new hardware detection, etc. so be aware that this does stop some things but any service that proves to be needed is trivial to re-enable.)

chkconfig nfslock off chkconfig cyrus-imapd off chkconfig iscsi off chkconfig iscsid off chkconfig netfs off chkconfig kudzu off

Further, if your system is like mine you likely use the web server very lightly but will find that the default configuration of Apache is set to spawn, by default, eight processes. This is far too many for a normal deployment. Each process uses memory. For an average deployment of Elastix, three is more than enough. You need only raise this number if web performance suffers. This will not impact telephony performance regardless.

In the file /etc/httpd/conf/httpd.conf we need to edit the section:

<IfModule prefork.c> StartServers 2 MinSpareServers 2 MaxSpareServers 8 ServerLimit 256 MaxClients 256 MaxRequestsPerChild 4000 </IfModule>

to something more like this:

<IfModule prefork.c> StartServers 3 MinSpareServers 2 MaxSpareServers 10 ServerLimit 256 MaxClients 256 MaxRequestsPerChild 4000 </IfModule>

You can wait for the system to reboot or restart Apache manually:

service httpd restart

And finally, to control swapping activity on the box, assuming that you want to avoid swapping when unnecessary, which I do because my box is virtualized, simply add this line on to /etc/sysctl.conf:

vm.swappiness = 10

You’ll want to test that number carefully. A setting of “10” is quite standard for virtualized systems. The default is “60”. For a physical deployment the higher value is likely better as it allows CentOS to make better decisions about how to utilize memory for maximum throughput. But on a virtualized system we really want to avoid, typically, any additional contention at the storage IO layer.
[Testing on Elastix 2.0 and 2.3]

And of course, sar -r

0_1461329974764_Screenshot from 2016-04-22 15:59:21.png

@Carnival-Boy said in E-Mail From OneDrive:

@scottalanmiller said in E-Mail From OneDrive:

And of course you can have an MSP

Well yeah. I don't see why you're conflating on-premise Exchange with having an internal IT department. I'm guessing NTG has supported on-premise Exchange for clients for years?

Sure. And I think that we are decent at it. But I'll be the first to admit that we can't do it as well as Microsoft can themselves. Do we try to? Sure. But realistically, we just can't. We can do a good job, but they have resources and scale and access to things that we cannot have.

We do, as an MS partner, have access to MS support directly and in ways that normal customers do not. That helps bridge that gap, but MS is always part of the bigger equation.

@Jason said in Citrix paid support:

@scottalanmiller said in Citrix paid support:

@DustinB3403 said in Citrix paid support:

I had made an assumption wig the name that they were related to XS. I didn't know they weren't, but just adding xen to everything.

XenApp is the basis for Windows RDS.

And now it runs on top of RDS..

Always did, more or less. I think for a while they bundled TS in it and install it all together. Now it automates the install. All the same though, they made TS/RDS for MS and took out the high end features (ICA being the biggest one) and when you install MetaFrame/XenApp they put them back in.

@scottalanmiller said in Are these real users or bots?:

Believe it or not, we have decent SEO and the search engines send people here for posts all of the time. Only a small fraction of people visiting will every become members with accounts, that's just how these things work. So the guest number isn't really unexpected.

Look at this show off

While that makes sense, the issue that they are mentioning there is not the issue that the FSF has with it. So they are ignoring the question at hand, which is distributing them together.

@BRRABill nice!

Not heard of it, but this made me laugh.

http://www.sitecore.net/learn/resources-library/white-papers/why-upgrade.aspx

XP and 8.1 in the same sentence, it boggles the mind.

@scottalanmiller said in Xen Orchestra - hung task - alert to a log and continue:

It says that the process was blocked, so that implies that no it cannot continue.

Thank you.... haha

You all know what sh-bang really is....

Youtube Video

@IRJ said in I'd like to see a noob CentOS and Ubuntu tutorial on security:

I'd like to see a tutorial on securing new CENTOS and Ubuntu servers out of the box. Is that something you could do @scottalanmiller ?

I'll see what I can do. But looks like some good resources provided already. Would be good to have info here too, though.

@Carnival-Boy said

I see to recall @scottalanmiller saying recently that you don't need to encrypt a laptop hard drive because you should never store anything on it - everything should be cloud only. I'm kinda on board with that, but I don't understand how you do that. Like, he recommends LibreOffice (I think?) but how do you open a Word document stored in Sharepoint in LibreOffice without downloading it onto the laptop first?

I think part of the completion of that thought is to only use data in applications that are cloud-data-aware.

So, you would only use Office documents. (For example, I asked "what about text files", and he said, just put it in Word.)

You would only put pictures and things in a picture-aware app (such as Flickr.)

Adobe stuff in Adobe apps.

Anything that still falls through the cracks you'd have to download locally.

At least I think that is the drift...

6 of one. It accomplishes what you wanted without having to go to each system and do it manually. Is it a full-on GPO setting? No. Will it work? Probably.

@Jason said in need program deployment (GPO) suggestion... Not how to but more of a best practice.:

@Dashrender said

Unless you're changing the computers as well, this won't work. At this level RDS is licensed to the machine/device. So if it's moving PC to PC, he'd need 50 RDS CALs, plus the server license. 40 more Adobe Acrobat licenses would be cheaper.

Not sure where you get that. RDS is device or user. The license server for RDS has no cost. RDS CALs can be reassigned once expired.

RDS user CALs are about $100. Adobe Acrobat pro is about $500 each

It must be a different User CAL that can't be purchased under 200 or 250 users. I can't find anything in a fast search about this specifically.

True the RDS license server is free, but the Windows Server you'll install Adobe Acrobat on isn't - it's $800+.

As for reassigning the licenses:
In Per User or Per Device mode, a separate TS CAL is required for each user or device that accesses or uses the server software on any server. You may reassign a TS CAL from one device to another device, or from one user to another user, provided the reassignment is made either (a) permanently away from the one device or user or (b) temporarily to accommodate the use of the TS CAL either by a loaner device, while a permanent device is out of service, or by a temporary worker, while a regular employee is absent.
Moving these licenses monthly surely wouldn't be considered permanently away. On top of that, even if it was OK to move them, the licenses only release from their previous user after 60 days of non use, so the monthly change would require at least two full sets of RDS licenses, and the change would take place on the 61 day, not the 60th.

Holy hell, Adobe Acrobat normal is $299. Damn that's expensive! Let alone Pro.

Here's a cool PS script I found that creates a nice htm file of the output.

https://gallery.technet.microsoft.com/scriptcenter/Generate-a-Report-of-a33cde56

@Dashrender said in Security Of Cloud Shared Links:

The entry itself can't output it self.. you have to use DNS to get the list, just like HTTP can't generate a list of items in a specified folder, the Web Server has to product a file (probably on the fly) for HTTP to deliver.

Again, this really isn't getting us anywhere - it's just weird.

The entry can't, but the entry itself is a link. What many DNS servers do is automatically produce all output for a domain as links. So you query them and you get a list of the links. This is how CloudFlare, for example, polls another DNS server to automate DNS movement.

@travisdh1 said in Any providers ever WISP'd?:

@marcinozga said in Any providers ever WISP'd?:

@travisdh1 said in Any providers ever WISP'd?:

@marcinozga said in Any providers ever WISP'd?:

@travisdh1 said in Any providers ever WISP'd?:

@marcinozga That's going to let you provide service, sure. They were paying $5 for the microwave based wireless radios they were using in the mid 2000s. That side of it hasn't really changed that much price wise in a long time.

Where are you getting the backbone connection?

From your local ISP. Once you get into the area of negotiations with major backbone providers you usually get out, that's whole different league.

If you plan to extend the service beyond what the local ISP has built out, then maybe you could do it, but it really limits the market you have available. Think of it this way, you are a potential competitor to the ISP, are they going to give you a good deal?

They don't have to. You just buy the service from them, then re-sell it. We were buying DSL lines at the regular business plan prices. I think overall we had close to 1000 customers in 30k city.

Apparently it's different where you are. Around here even the business lines often have clauses that prevent you from reselling the service 😞

Not surprised - a resold line has a higher likeliness of running at or near full capacity. The sad fact is that ISPs almost always oversell their bandwidth, they have expectations of something like 30% usage over the 24 hour day.